StackRadar

CVE-2025-8194

High

Advisory

Published 28 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
587
of 17,781 indexed, latest versions
Container images
595
deployed by those charts
Fix available
25 of 25
affected packages

Tarfile infinite loop during parsing with negative member offset

Carried by container images the latest versions of 587 of 17,781 indexed charts deploy, on 595 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3+3 more3.11.0~rc1-1~22.04.1~esm5, 3.11.2-6+deb12u7144
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+24 more0:3.6.8-71.el8_10, 0:3.6.8-71.el8_10.rocky.0128
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more3.8.10-0ubuntu1~20.04.18+esm2100
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+12 more3.10.12-1~22.04.1158
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more2.7.6-8ubuntu0.6+esm26, 2.7.12-1ubuntu0~16.04.18+esm17, 2.7.17-1~18.04ubuntu1.13+esm12, 2.7.18-1~20.04.7+esm8+1 more54
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more3.6.9-1~18.04ubuntu1.13+esm644
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.13+esm1925
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+8 more0:3.9.21-2.el9_6.223
python3.13deb3.13.5-2, 3.13.5-2+e303.13.5-2+deb13u1, 3.13.5-2+e3622
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+2 more3.12.3-1ubuntu0.819
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+23445+8885b4ac.3, 0:50.3.2-7.module+el8.8.0+23471+79c1a0709
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm167
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+23492+77169564.5, 0:3.9.16-1.module+el8.8.0+23491+7a06a3e6.56
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.9.243
python3.11rpm3.11.7-1.el9, 3.11.7-1.el9_4.50:3.11.11-2.el9_6.22
python-3.12apk3.12.0-r1, 3.12.9-r13.12.11-r62
python3.12rpm3.12.5-2.el9_5.20:3.12.9-1.el9_6.21
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
BIT-python-2025-8194CGA-gpx3-xp28-32xwDEBIAN-CVE-2025-8194RHSA-2025:14560RHSA-2025:15007RHSA-2025:15010RHSA-2025:15019RHSA-2025:16062RHSA-2025:16078RHSA-2025:16118RLSA-2025:14560RLSA-2025:15019UBUNTU-CVE-2025-8194ECHO-053d-4507-0279USN-7710-2
Also known as
BIT-libpython-2025-8194, BIT-python-min-2025-8194, CGA-h5mr-vfp3-hqw6, PSF-2025-11, RHSA-2025:15800, RHSA-2025:15968, RHSA-2025:16016, RHSA-2025:16151, RHSA-2025:16152, RHSA-2025:16153, RHSA-2025:16262, USN-7710-1

Charts affected

587 by stars
ChartLatestAffected imagesRadar Score
neurofaceneurofaceVerified publisher1.4.21 of 3See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
openvino/model_server:2025.2.11e7cd1d70cc1
python3.12@3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.8

Open the chart page →

7,310
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7

Open the chart page →

10,218
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
python3.8@3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.18+esm2

Open the chart page →

22,658
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
python3.11@3.11.2-6
3.11.2-6+deb12u7

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
python3.11@3.11.2-6
3.11.2-6+deb12u7

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
python3.11@3.11.2-6
3.11.2-6+deb12u7

Open the chart page →

15,187
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python2.7@2.7.6-8
python3.4@3.4.0-2ubuntu1
2.7.6-8ubuntu0.6+esm26
3.4.3-1ubuntu1~14.04.7+esm16

Open the chart page →

41,427
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
python2.7@2.7.17-1~18.04ubuntu1.2
2.7.17-1~18.04ubuntu1.13+esm12

Open the chart page →

27,465
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
python3.6@3.6.9-1~18.04
3.6.9-1~18.04ubuntu1.13+esm6

Open the chart page →

27,633
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
python@3.13.5-1
python3.11@3.11.2-6+deb12u6
3.9.24
3.11.2-6+deb12u7

Open the chart page →

5,288
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
python3.10@3.10.12-1~22.04.2
3.10.12-1~22.04.11

Open the chart page →

9,005
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
python3@3.6.8-51.el8_8.1
0:3.6.8-71.el8_10
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
python3@3.6.8-51.el8_8.1
0:3.6.8-71.el8_10
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
python3@3.6.8-51.el8_8.1
0:3.6.8-71.el8_10

Open the chart page →

18,667
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-urllib3@1.24.2-5.el8
python-wheel@0.33.6-5.module+el8.4.0+8888+89bc7e79
python3@3.6.8-37.el8
python3x-pip@19.3.1-1.module+el8.4.0+8888+89bc7e79
python3x-setuptools@41.6.0-4.module+el8.4.0+8888+89bc7e79
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:1.25.10-3.module+el8.4.0+9822+20bf1249
1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1
0:3.6.8-71.el8_10
0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1
0:50.3.2-3.module+el8.4.0+23445+8885b4ac.3

Open the chart page →

18,023
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
python2.7@2.7.12-1ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm17

Open the chart page →

63,223
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm17
3.5.2-2ubuntu0~16.04.13+esm19
omecproject/onos-progran:1.0.05715e5648aa0
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm17
3.5.2-2ubuntu0~16.04.13+esm19
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm17
3.5.2-2ubuntu0~16.04.13+esm19

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm17
3.5.2-2ubuntu0~16.04.13+esm19

Open the chart page →

26,211
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
python2.7@2.7.17-1~18.04
2.7.17-1~18.04ubuntu1.13+esm12

Open the chart page →

15,702
mcord-cdn-remoteopencord0.1.62 of 2See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
python2.7@2.7.12-1ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm17
woojoong/wowza:latestec230db19652
python2.7@2.7.15~rc1-1ubuntu0.1
2.7.17-1~18.04ubuntu1.13+esm12

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
python2.7@2.7.12-1ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm17

Open the chart page →

29,124
omec-control-planeopencord0.1.312 of 8See more

omec-control-plane opencord 0.1.31

2 of the 8 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
omecproject/c3po-hssdb:master-latest28a90cc26716
python2.7@2.7.18-1~20.04.1
2.7.18-1~20.04.7+esm8
omecproject/mme-exporter:paging-latestbcc5f19fd676
python3.6@3.6.9-1~18.04
3.6.9-1~18.04ubuntu1.13+esm6

Open the chart page →

40,715
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm17
3.5.2-2ubuntu0~16.04.13+esm19

Open the chart page →

38,865
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
python2.7@2.7.12-1ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm17

Open the chart page →

12,609
sebaopencord1.0.06 of 17See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
python2.7@2.7.12-1ubuntu0~16.04.2
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm17
3.5.2-2ubuntu0~16.04.13+esm19
voltha/voltha-cli:1.6.0c4e41e92f046
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm17
3.5.2-2ubuntu0~16.04.13+esm19
voltha/voltha-envoy:1.6.059ab2a00f712
python3.4@3.4.3-1ubuntu1~14.04.5
3.4.3-1ubuntu1~14.04.7+esm16
voltha/voltha-netconf:1.6.037f80524c207
python2.7@2.7.12-1ubuntu0~16.04.3
2.7.12-1ubuntu0~16.04.18+esm17
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python2.7@2.7.12-1ubuntu0~16.04.3
2.7.12-1ubuntu0~16.04.18+esm17
voltha/voltha-voltha:1.6.0ff596b62de59
python2.7@2.7.12-1ubuntu0~16.04.3
2.7.12-1ubuntu0~16.04.18+esm17

Open the chart page →

93,855
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
python2.7@2.7.17-1~18.04
2.7.17-1~18.04ubuntu1.13+esm12

Open the chart page →

41,044
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u7

Open the chart page →

10,978
akeyless-api-gatewayopenshift1.41.21 of 1See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
akeyless/base-rhel:0.0.14ba8900a0061
python3@3.6.8-56.el8_9.3
0:3.6.8-71.el8_10

Open the chart page →

11,796
bpjstk-serviceopenshift1.0.03 of 6See more

bpjstk-service openshift 1.0.0

3 of the 6 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
andrianrf/backoffice:latest047a7837651e
python3@3.6.8-62.el8_10
0:3.6.8-71.el8_10
andrianrf/backoffice-be:latest6036614803d4
python3.9@3.9.16-1.el9
0:3.9.21-2.el9_6.2
andrianrf/iso-server:latest7da47f525c7d
python3.9@3.9.16-1.el9
0:3.9.21-2.el9_6.2

Open the chart page →

34,671
canvas-oamportalopenshift4.0.01 of 1See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
gurolakman/oam:4.0.0ed8fd2062548
python3@3.6.8-62.el8_10
0:3.6.8-71.el8_10

Open the chart page →

7,519
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
python3.11@3.11.7-1.el9_4.5
python3.9@3.9.18-3.el9_4.5
0:3.11.11-2.el9_6.2
0:3.9.21-2.el9_6.2
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
python3.11@3.11.7-1.el9
python3.9@3.9.18-3.el9
0:3.11.11-2.el9_6.2
0:3.9.21-2.el9_6.2

Open the chart page →

18,922
exporteropenshift1.0.473 of 3See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
python3@3.6.8-67.el8_10
0:3.6.8-71.el8_10
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
python3.9@3.9.19-8.el9_5.1
0:3.9.21-2.el9_6.2
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
python3.9@3.9.19-8.el9_5.1
0:3.9.21-2.el9_6.2

Open the chart page →

13,000
flomesh-consoleopenshift0.70.0-30-ubi82 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
python3@3.6.8-48.el8_7
0:3.6.8-71.el8_10
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
python3@3.6.8-48.el8_7
0:3.6.8-71.el8_10

Open the chart page →

9,968
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
python3@3.6.8-48.el8_7
0:3.6.8-71.el8_10

Open the chart page →

16,556
orion-ldopenshift1.0.31 of 2See more

orion-ld openshift 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
python3@3.6.8-39.el8_4
0:3.6.8-71.el8_10

Open the chart page →

14,727
osm-edgeopenshift1.2.1-ubi81 of 7See more

osm-edge openshift 1.2.1-ubi8

1 of the 7 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
python3@3.6.8-48.el8_7
0:3.6.8-71.el8_10

Open the chart page →

19,455
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
python3.9@3.9.16-1.el9_2.1
0:3.9.21-2.el9_6.2

Open the chart page →

8,599
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
python3@3.6.8-56.el8_9.2
0:3.6.8-71.el8_10

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
python3@3.6.8-56.el8_9.2
0:3.6.8-71.el8_10

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
python3@3.6.8-56.el8_9.2
0:3.6.8-71.el8_10

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
python3@3.6.8-56.el8_9.2
0:3.6.8-71.el8_10

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
python3@3.6.8-56.el8_9.2
0:3.6.8-71.el8_10

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
python3@3.6.8-56.el8_9.2
0:3.6.8-71.el8_10

Open the chart page →

13,100
openshift-integration-operatoropenshift-integration-operatorVerified publisher0.8.21 of 2See more

openshift-integration-operator openshift-integration-operator 0.8.2

1 of the 2 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
python3.9@3.9.21-1.el9_5
0:3.9.21-2.el9_6.2

Open the chart page →

2,045
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python2.7@2.7.17-1~18.04ubuntu1.2
2.7.17-1~18.04ubuntu1.13+esm12

Open the chart page →

15,592
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
python2.7@2.7.17-1~18.04ubuntu1.2
2.7.17-1~18.04ubuntu1.13+esm12

Open the chart page →

36,215
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
python3.4@3.4.3-1ubuntu1~14.04.6
3.4.3-1ubuntu1~14.04.7+esm16

Open the chart page →

26,339
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
python3.11@3.11.2-6+deb12u2
3.11.2-6+deb12u7

Open the chart page →

10,896
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
python3.11@3.11.2-6+deb12u2
3.11.2-6+deb12u7

Open the chart page →

71,208
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
python3.11@3.11.2-6
3.11.2-6+deb12u7

Open the chart page →

12,350
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
python3.11@3.11.2-6+deb12u2
3.11.2-6+deb12u7
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
python3.11@3.11.2-6+deb12u2
3.11.2-6+deb12u7

Open the chart page →

27,373
p4p40.1.02 of 7See more

p4 p4 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-8194.

Container imageDigestPackageFixed in
library/rabbitmq:3.11-managementc3f70098e01d
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.11
mastercloudapps/server:v2.23f3d24dfe2686
python3@3.6.8-48.el8_7
0:3.6.8-71.el8_10

Open the chart page →

27,537

Container images carrying it

595 by charts deploying them

A fixed version is listed for 25 of the 25 affected packages.

Container imageDigestPackageFixed inUsed by
haveagitgat/tdarr_node:2.17.013ff0913202dd
python3.8@3.8.10-0ubuntu1~20.04.8
python2.7@2.7.18-1~20.04.3
3.8.10-0ubuntu1~20.04.18+esm2
2.7.18-1~20.04.7+esm8
1
hazelcast/management-center:5.3.2f9d34300d330
python3@3.6.8-51.el8_8.1
0:3.6.8-71.el8_10
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
python3.8@3.8.10-0ubuntu1~20.04.13
3.8.10-0ubuntu1~20.04.18+esm2
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
python3.11@3.11.2-6
3.11.2-6+deb12u7
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm17
3.5.2-2ubuntu0~16.04.13+esm19
1
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
python3@3.6.8-23.el8
0:3.6.8-71.el8_10
1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
python3@3.6.8-23.el8
0:3.6.8-71.el8_10
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
python3@3.6.8-31.el8
0:3.6.8-71.el8_10
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
python3.5@3.5.2-2ubuntu0~16.04.4
3.5.2-2ubuntu0~16.04.13+esm19
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm17
3.5.2-2ubuntu0~16.04.13+esm19
1
ibmcom/microclimate-theia:lateste17bdccc5030
python2.7@2.7.12-1ubuntu0~16.04.2
2.7.12-1ubuntu0~16.04.18+esm17
1
ibmcom/skydive:0.22.0395e60cc6e3d
python2.7@2.7.15~rc1-1ubuntu0.1
2.7.17-1~18.04ubuntu1.13+esm12
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
python3.11@3.11.2-6
3.11.2-6+deb12u7
1
inseefrlab/shelly:cloudshell31f04ca7436b
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.11
1
instill/artifact-backend:b28766ac4a393e601ed
python3.13@3.13.5-2
3.13.5-2+deb13u1
1
instill/mgmt-backend:d0933d4ebe12f77a3f9
python3.13@3.13.5-2
3.13.5-2+deb13u1
1
instill/model-backend:611f0f2e980125e5ba5
python3.13@3.13.5-2
3.13.5-2+deb13u1
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
python3.8@3.8.10-0ubuntu1~20.04.4
3.8.10-0ubuntu1~20.04.18+esm2
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
python3.8@3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.18+esm2
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
python3.11@3.11.2-6
3.11.2-6+deb12u7
1
iofog/router:2.0.17260cf861479
python2.7@2.7.17-1~18.04ubuntu1.1
2.7.17-1~18.04ubuntu1.13+esm12
1
iomesh/csi-driver:v2.8.01a151f602451
python3.10@3.10.12-1~22.04.4
3.10.12-1~22.04.11
1
iomesh/csi-driver:v2.7.25d3f9bf9240b
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.11
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.18+esm2
1
ispras/svacer:11-2-042aa9fa9f189
python3.10@3.10.12-1~22.04.10
3.10.12-1~22.04.11
1
istio/install-cni:1.10.32232f365aed6
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm6
1
istio/node-agent-k8s:1.2.9268ab879ea51
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm19
1
istio/operator:1.10.3655eefa11c84
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm6
1
istio/pilot:1.10.0294ca55bd1cc
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm6
1
istio/pilot:1.2.9c09319753454
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm19
1
istio/pilot:1.10.3e7e110a421c2
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm6
1
istio/proxyv2:1.2.90c78be035e98
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm19
1
istio/proxyv2:1.9.687a9db561d2e
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm6
1
istio/proxyv2:1.10.088c6c693e67a
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm6
1
jaedb/iris:latest048cfbf58d57
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u7
1
jakowenko/double-take:1.6.0b858bac9e32a
python3.8@3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.18+esm2
1
jedi132000/nextapp:latestdc2a81e92f23
python3.8@3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.18+esm2
1
jmferrer/azure-devops-agent:latest030f68ec6998
python3.5@3.5.2-2ubuntu0~16.04.9
3.5.2-2ubuntu0~16.04.13+esm19
1
josh5/unmanic:0.2.64d49c4816260
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.11
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
python3.8@3.8.5-1~20.04
3.8.10-0ubuntu1~20.04.18+esm2
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
python3.8@3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.18+esm2
1
kennethreitz/httpbin:latest599fe5e50731
python3.6@3.6.6-1~18.04
3.6.9-1~18.04ubuntu1.13+esm6
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
python3.8@3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.18+esm2
1
kinseii/wazuh-agent:4.14.17160eb143728
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7
1
knspar/phronetis:0.1.4609499d2dc91a
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.8
1
knspar/phronetis-operator:0.1.60c4f0543ee58
python3.11@3.11.2-6
3.11.2-6+deb12u7
1
kong/httpbin:latesta6ac46531193
python3.10@3.10.12-1~22.04.7
3.10.12-1~22.04.11
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
python3.6@3.6.9-1~18.04ubuntu1
3.6.9-1~18.04ubuntu1.13+esm6
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
python3.12@3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.8
1
kusionstack/kusion:v0.14.0126c8f0b0976
python3.10@3.10.12-1~22.04.8
3.10.12-1~22.04.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.